SecGen
SecGen copied to clipboard
gitlist in sub-directory
trafficstars
gitlist040 is exploitable in principle, however the MSF module exploits/linux/http/gitlist_exec only works if the gitlist is located in www_root/gitlist/. in our setup the gitlist is in www_root/. As a result the regular expression in the script cannot find any repository and exits with the error message 'Failed to retrieve the remote repository'.
Maybe we should deploy the gitlist in www_root/gitlist/ and configure the apache to use /gitlist/index.php as DirectoryIndex. The second solution is more natural if we do not want to modify the msf.